Privacy Policy

Website: www.shiftandrise.org|  Effective Date: 10-04-2026

Last Updated: 20-04-2026

1. Introduction & Data Controller Information

Welcome to Shift and Rise. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard information about you when you visit our website.

As the data controller, we are responsible for your personal data:

  • Business: Shift and Rise FZE

  • Registered Address: Business Center, Sharjah Publishing City Free Zone,Sharjah , United Arab Emirates

  • Contact Email: pamela.sayegh@shiftandrise.org

  • Website: www.shiftandrise.org

If you have any questions or concerns about this policy, please contact us using the details above before using our site.

2. Types of Personal Data Collected

Because our website operates primarily as a professional services and portfolio platform, we collect only the minimum data necessary to respond to enquiries.

2.1 Data You Provide Directly

When you submit our contact form, we collect:

• Full name
• Email address
• Any additional information you voluntarily include in your message

2.2 Data Collected Automatically

When you visit our website, we may automatically collect limited technical information through first-party session and preference cookies (see Section 4). This may include:

• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring URL (the page that directed you to our site)

We do not collect sensitive personal data (e.g. health, financial, or biometric data) and we do not use third-party analytics or advertising trackers.

3. Purposes and Legal Basis for Data Processing

We process your personal data only where we have a legitimate legal basis to do so. The table below outlines our processing activities:

• Purpose: Responding to contact form enquiries
• Legal basis: Legitimate interests — to respond to questions and manage professional communications

• Purpose: Maintaining website functionality and user preferences via cookies
• Legal basis: Legitimate interests — to ensure the website operates correctly and remembers your preferences

• Purpose: Complying with legal obligations (e.g. record-keeping)
• Legal basis: Legal obligation — where required by applicable law

We do not use your personal data for automated decision-making or profiling.

4. Cookies and Similar Tracking Technologies

Our website uses first-party cookies only. These are small text files placed on your device by our website directly. We do not deploy third-party cookies, advertising pixels, or cross-site tracking technologies of any kind.

4.1 Types of Cookies We Use

• Session cookies — These are temporary cookies that expire when you close your browser. They are used to maintain basic website functionality during your visit (e.g. navigating between pages).
• Preference cookies — These remember choices you make (such as language or display settings) so that we can provide a more personalised experience on return visits.

4.2 Managing Cookies

You can control or delete cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain parts of our website. For guidance on managing cookies in your browser, visit www.aboutcookies.org.

5. Data Sharing with Third Parties

We do not sell, rent, trade, or otherwise share your personal data with any third parties for marketing or commercial purposes.

In limited circumstances, we may be required to disclose your personal data:

• To comply with a legal obligation, court order, or lawful request from a public authority.
• To protect and defend our legal rights or the safety of our users.

Should this position change in the future — for example, if we introduce a third-party email or hosting provider — this policy will be updated accordingly before any such sharing takes place, and you will be notified where required by law.

6. Data Retention Periods

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law.

• Contact form submissions — We retain messages and associated contact details for a period of 2 years from the date of last communication. After this period, data is securely deleted unless an ongoing business relationship requires longer retention.
• Cookie data — Session cookies are deleted automatically when you close your browser. Preference cookies expire after 12 months.

You may request deletion of your data at any time (see Section 7). Upon receiving a valid request, we will delete your data within 30 days, except where we are legally required to retain it.

7. Your Rights

Depending on your location and applicable law, you may have some or all of the following rights regarding your personal data:

• Right of access — You may request a copy of the personal data we hold about you.
• Right to rectification — You may ask us to correct any inaccurate or incomplete data.
• Right to erasure — You may request that we delete your personal data ('right to be forgotten'), subject to certain legal conditions.
• Right to restriction — You may ask us to restrict how we process your data while a complaint is being investigated.
• Right to object — You may object to our processing of your data where we rely on legitimate interests as our legal basis.
• Right to data portability — Where applicable, you may request your data in a structured, machine-readable format.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at: pamela.sayegh@shiftandrise.org

We will respond to your request within 30 days. We may need to verify your identity before processing your request.

If you are located in the European Union or United Kingdom and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

8. Data Security Measures

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Our measures include:

• Secure transmission of data via HTTPS / SSL encryption on all pages of our website.
• Restricted access to personal data, limited to authorised individuals who need it to perform their duties.
• Regular review of our data handling practices and this Privacy Policy.
• Secure deletion of data in accordance with our retention schedule.

While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify you and the relevant authorities promptly in the event of a data breach as required by law.

9. International Data Transfers

Our website serves a global audience. If you are accessing our site from outside the country in which we are based, please be aware that your information may be transferred to, stored, and processed in our country of operation.

Our website and data are hosted in European Union (France & Germany). Where we transfer data internationally, we take steps to ensure appropriate safeguards are in place to protect your personal data in accordance with applicable law.

10. Children's Privacy

Our website is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete it.

11. Third-Party Links

Our website may contain links to third-party websites for your convenience or reference. This Privacy Policy applies solely to our website. We are not responsible for the privacy practices or content of any third-party sites and encourage you to review their respective privacy policies.

12. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make changes, we will:

• Update the 'Last Updated' date at the top of this policy.
• Post the revised policy on this page with reasonable notice.
• Where changes are significant, we may provide a more prominent notice.

We encourage you to review this policy periodically to stay informed about how we protect your data.

13. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact us:

  • Name: Pamela Sayegh

  • Email:  pamela.sayegh@shiftandrise.org  

We aim to respond to all privacy-related enquiries within 5 business days.

— End of Privacy Policy —